Skip to content
OpenAdvisories
High USN-5125-1 1 CVE

php5, php7.0, php7.2, php7.4, php8.0 vulnerability

Published Oct 27, 2021 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that PHP-FPM in PHP incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash or execute
arbitrary code.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS php7.2 7.2.24-0ubuntu0.18.04.10
Ubuntu · 20.04 LTS 20.04:LTS php7.4 7.4.3-4ubuntu2.7
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS php5 5.5.9+dfsg-1ubuntu4.29+esm15
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS php7.0 7.0.33-0ubuntu0.16.04.16+esm2

Vulnerabilities 1

  • High 7.8
    CVE-2021-21703

    PHP-FPM memory access in root process leading to privilege escalation

    In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and child worker processes running as lower-privileged users, it is possible for the child proc…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2021-21703